Senior Enterprise Risk Consultant
Location
Cheltenham
Remote Working
Department
Risk and Compliance
IRM is a cybersecurity consultancy with a twenty year history of delivering world-class service to some of the UK’s biggest brands and organisations. Two years ago, IRM was acquired by the Altran Group – the world’s leading engineering and R&D Company, with around 45,000 employees around the globe and a turnover of around €3 billion.
Since the acquisition, we have moved into new and exciting areas of security, using Altran’s global account managers to welcome new clients through our doors.
We have opened a satellite offices in locations including Portugal and Santa Clara as we begin to position ourselves as a global player in cybersecurity. With Altran’s backing, we aim to be the leading security testing company for the world’s largest engineering brands.
The Enterprise Risk Team
Heading up our enterprise risk team is Andy Finnan, who has 25 years’ experience in information security and has spent more than 10 years with IRM. The team currently has eight full time consultants each with their own specialties and abilities. The team meet once a month for training, development and updates in the Cheltenham office. As most of our workers are remote / home-based, getting everybody together once a month helps to install a real team dynamic.
Each member of the team brings their own unique experiences and views and we positively encourage collaboration when needed. On some larger engagements we may assign multiple consultants where rank and tenure have no bearing on the management of the team.
Since the Altran acquisition, we have kept all the things that made IRM a great company – brand identity and a SME culture that runs through the business. We don’t adopt a corporate culture and we are proud to have the same company ethos as we did twenty years ago.
The Role
Our Enterprise Risk (ER) team is responsible for some of our key consultancy services. We provide services such as ISO 27001 assessment, PCI, QSA, threat and vulnerability analysis and training. The structure of the department has been developed to enhance all areas of an individual’s information security knowledge and experience. You will have the opportunity to work with (but not limited to) major high street retailers, healthcare companies, finance and insurance companies as well as some public bodies.
Consultants are expected to take ownership of their customer engagements, with support from the team where required.
As a consultant, travelling to and from client sites will be an intrinsic part of the role, including overnight stays when required. You’ll be expected to handle a number of client engagements across a range of requirements, keeping your workload varied.
Essential Skills and Criteria
- Degree within Information Security or Information Security experience
- Considerable consultancy experience
- Ability to travel to both client site and to Cheltenham when required
- At least one of following certifications – ISO2701 Lead Audit or Implementer, CISMP, PCI QSA, CISSP, CCP Senior, / Lead IA Architect / SIRA / IA Auditor
- Ability to communicate complex situations clearly and concisely at all levels
Benefits
- Competitive salary (experience dependant)
- Expenses paid second and fourth Friday of every month
- Project Management Office to ensure that your time is appropriately allocated to meet client requirements.
- Life assurance
- Medical*
- Dental*
- Pension contribution (increases in line with length of service)*
- 25 days holiday allowance (increasing to 28 days in line with length of service with IRM)
* Offered after probation is passed